e16f4f21a31382d54afaf05b584e1d97_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e16f4f21a31382d54afaf05b584e1d97_JaffaCakes118
Size

63KB
MD5

e16f4f21a31382d54afaf05b584e1d97
SHA1

6a15bcd33785cda177a003e16e9cc30e944bedd2
SHA256

32c7c7c98ce395f3ec38ce6d9a07a95443d5ea449f38cbd37f594034bab4e817
SHA512

25cfd7b20385ba558e2b9104edac7abacd956e4e3efbb2ec0908ed79476ace0c49203f2e105d3b4be9181cc71320f7f767c47a588d181902bc4c16b3e5a12e9c
SSDEEP

1536:DJUXg84vocdFxNg0ICUQtN9cGv8laP29j+Z/89jo:p84ZFngfiFjvsaO96Z/89jo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e16f4f21a31382d54afaf05b584e1d97_JaffaCakes118

Files

e16f4f21a31382d54afaf05b584e1d97_JaffaCakes118
.dll windows:4 windows x86 arch:x86

f1a7c45fc327025cccf6d19a02df8176

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

RegisterClassW
OffsetRect
MessageBoxW
MessageBoxIndirectW
MessageBeep
GetMessageW
EmptyClipboard

kernel32

GetCurrentProcessId
TerminateProcess
Sleep
LocalAlloc
LoadLibraryW
FreeLibrary
ExitProcess
DeleteCriticalSection
CloseHandle
CreateFileW

advapi32

RegEnumValueW
RegQueryValueExW
RegSetValueExW
RegCloseKey

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ